CVE-2008-7227
PartialBufferOutputStream2 flush issues
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
Exploit likelihood
What each source reports
NVD Score used
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
- Record
CVE-2008-7227- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
- Record
CVE-2008-7227- Updated
- 2026-11-02
EUVDEUVD-2022-3188 No score
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
- Record
EUVD-2022-3188- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8hmh-mhqv-7638 No score
PartialBufferOutputStream2 flush issues
Withdrawn
This advisory has been withdrawn as there the effects of the bug would only give the caller an incomplete view of data which they would be authorized to see.
Original Advisory
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
- Record
GHSA-8hmh-mhqv-7638- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVGHSA-8hmh-mhqv-7638 No score
PartialBufferOutputStream2 flush issues
Withdrawn
This advisory has been withdrawn as there the effects of the bug would only give the caller an incomplete view of data which they would be authorized to see.
Original Advisory
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
- Record
GHSA-8hmh-mhqv-7638- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-7227 is a medium vulnerability (CVSS 5.0) in Geoserver, published September 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 60th percentile. No source names a fixed version.